Your OPSEC Is Bad And You Should Feel Bad

Your OPSEC is Bad and You Should Feel Bad

Okay so one of the many things that drives me absolutely nuts about most TV shows and (some) books that involve secret or classified information or secure facilities is how absolutely not secure everything is, so these are a few basic things that people get wrong:

You can't carry around classified information. There are, I assume, exceptions in specific cases, though they are assuredly very carefully managed, but random intel agent #12 cannot legally just take home classified information so they can work on it at home. That's incredibly illegal. And that's for a reason--secure facilities are, as the name suggests, secure. Everywhere else is varying levels of not secure. Even for people working with regular business or government materials on their work phone or laptop, there are varying levels of strict rules about where you can leave it, how to report a lost device, and not keeping it in checked bags.

Badges should be innocuous and limited in visible information. Any sensible security system doesn't have badges that are numbered/colored/otherwise identified by access level, because that is a really easy way to identify targets for thieves/people who want to break in. American federal ID cards (CAC for military, PIV for civilian) have really specific layouts. Some companies distinguish between full time employees, interns, vendors, etc in their cards.

Badges shouldn't be displayed outside of the office. This is not really followed by real people (if you get on the metro on DC you will see a wide variety of visible badges), but displaying a badge is not security-wise because 1) it makes them easier to steal, and 2) it can make you a target.

Names/access level/information shouldn't be openly announced. I'm looking at you, MCU Spider-Man fanfiction. Just. Don't.

Confidential/classified information shouldn't be openly discussed. Stop having your characters talk about confidential or classified information in front of people who shouldn't know it, or even just out in the open at all. They shouldn't be telling their parents, their friends, their spouses, etc. Even businesses or government buildings that deal with sensitive information, there may be spaces where certain things can or can't be discussed, and employees/contractors will go through approximately 8 million trainings on where you can't discuss certain information. This also involves erasing whiteboards, locking computers, etc.

You can't have cell phones in certain secure facilities. People shouldn't be having their cell phones with them in SCIFs. This prohibition extends to all things that can be recording devices, including furbies.